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X86-to Tapestry transition exception handler ^ 

II This handler is entered under the following conditions: 
// 1 . An x86 caller invokes a native function 
// 2. An x86 function returns to a native caller 

// 3. x86 software returns to or resumes an interrupted native function following 
// an external asynchronous interrupt, a processor exception, or a context switch 
r 321 

dispatch on the two least-significant bits of the destination address { 
case"00 n // calling a native subprogram 

// copy linkage and stack frame information and call parameters from the memory 

// stack to the analogous Tapestry registers 

LR — [SP++] // set up linkage register^^iL . 

AP— SP //address of first argument^" 32 6 f322 

SP — SP - 8 // allocate return transfer argument area 327 
SP ->-SP & (-32) // round the stack pointer down to a 0 mod 32 boundary 
XD^- 0 // inform callee that caller uses X86 calling conventions 328 

case "Of // resuming an X86 thread suspended during execution of a native routine ^ 
if the redundant copies of the save slot number in EAX and EDX do not match or if \ 371 
the redundant copies of the timestamp in EBX:ECX and ESLEDI do not match { J 
// some form of bug or thread corruption has been detected 
goto TAPESTRY_CRASH_SYSTEM( thread-corruption-error-code ) 372 

} 

save the EBX:ECX timestamp in a 64-bit exception handler temporary register! 373 

(this will not be overwritten during restoration of the full native context) J 
use save slot number in EAX to locate actual save slot storage^^374 
restore full entire native context (includes new values for all x86 registers) — ^_o 75 
if save slot's timestamp does not match the saved timestamp { ~^~376 
// save slot has been reallocated; save slot exhaustion has been detected 
goto TAPESTRY_CRASH_SYSTEM( save-slot-overwritten-error-code K 077 

case"1 0" // returning from X86 callee to native caller, result already in registers ^ 

RV0<63:32>— edx<31:00> // in case result is 64 bits — —333 L QO 

convert the FP top-of-stack value from 80 bit X86 form to 64-bit form in RVDP ^^_oq 4 | 66Z 
SP —ESI // restore SP from time of call — - — 337 °™ J 

case"1T // returning from X86 callee to native caller, load large result from memory 

RV0..RV3 — - load 32 bytes from [ESI-32] // (guaranteed naturally aligned) -\ Q<3n 1 o 9Q 
SP— ESI // restore SP from time of call ^ 337 

EPO- EPC & -4 // reset the two low-order bits to zero 
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340 

/ 

Tapestry-to-X86 transition exception handler 

// This handler is entered under the following conditions: 
// 1. a native caller invokes an x86 function 
// 2. a native function returns to an x86 caller 
switch on XD<3:0>{ -v 

■\ 

XD_RET_FP: // result type is floating point 

FO/FI— FINFLATE.de( RVDP) //X86 FP results are 80 bits 
SP^— from RXA save // discard RXA, pad, args 

FPCW^-image after FINIT & push // FP stack has 1 entry 
goto EXIT 

XD_RET_WRITEBACK: // store result to @RVA, leave RVA in eax 

RVA-*-from RXA save // address of result area 

copy decode(XD<8:4>) bytes from RV0..RV3 to [RVA] \ 342 

eax— RVA // X86 expects RVA in eax 

SP— from RXA save // discard RXA, pad, args 

FPCW— image after FINIT // FP stack is empty 

goto EXIT 

XD_RET_SCALAR: // result in eax:eda 

edx<31 :00> — eax<63:32> // in case result is 64 bits 
SP-*-from RXA save // discard RXA, pad, args 

FPCW^-image after FINIT // FP stack is empty j 

goto EXIT 

XD_CALL_H I DDEN_TEM P: // allocate 32 byte aligned hidden temp^ 
esi-»— SP // stack cut back on return 

SP— SP - 32 // allocate max size temp 1 344 

RVA— SP //RVA consumed later by RR J 

LR<1:0>— "11" //flag address for return & reload^ 

goto CALL_COMMON ^345 

default: // remaining XD_CALL_xxx encodings 

esi-*— SP // stack cut back on return 

LR<1 :0> —"10" // flag address for return 3 ^3 

CALL.COMMON: 347 N346 

interpret XD to push and/or reposition args S 
[-SP] — LR // push LR as return address 

EXIT: 

setup emulator context and profiling ring buffer pointer 
} /-349 

RFE // to original target 

FIG. 3l 
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350 

interrupt/exception handler of Tapestry operating system: ^ 
II Control vectors here when a synchronous exception or asynchronous interrupt is to be 
// exported to / manifested in an x86 machine. 

//The interrupt is directed to something within the virtual X86, and thus there is a possibility 
// that the X86 operating system will context switch. So we need to distinguish two cases: 
// either the running process has only X86 state that is relevant to save, or 
// there is extended state that must be saved and associated with the current machine context 
// (e.g., extended state in a Tapestry library call in behalf of a process managed by X86 OS) 
if execution was interrupted in the converter - EPC.ISA == X86 { "1 

// no dependence on extended/native state possible, hence no need to save any f 351 
goto EM86_Deliver_lnterrupt( interrupt-byte ) J 
} else if EPC.Taxi_Active { 

// A Taxi translated version of some X86 code was running. Taxi will rollback to an ^ 
//x86 instruction boundary. Then, if the rollback was induced by an asynchronous external 
// interrupt, Taxi will deliver the appropriate x86 interrupt. Else, the rollback was induced 
// by a synchronous event so Taxi will resume execution in the converter, retriggering the 
// exception but this time with EPC.ISA == X86 
goto TAXi_Rollback( asynchronous-flag, interrupt-byte ) 
}elseif EPC.EM86{ < 
// The emulator has been interrupted. The emulator is coded to allow for such 
// conditions and permits re-entry during long running routines (e.g. far call through a gate) 
// to deliver external interrupts 
goto EM86_Deliver_lnterrupt( interrupt-byte ) 
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} else { 



// This is the most difficult case - the machine was executing native Tapestry code on ^ 
// behalf of an X86 thread. The X86 operating system may context switch. We must save 
// all native state and be able to locate it again when the x86 thread is resumed. 
r 361 

allocate a free save slot; if unavailable free the save slot with oldest timestamp and try again 
save the entire native state (both the X86 and the extended state) 1 oe 9 

save the X86 EIP in the save slot J r 363 

overwrite the two low-order bits of EPC with "Of (will become X86 interrupt EIP) ■/ )>360 
store the 64-bit timestamp in the save slot, in the X86 EBX:ECX register pair (and, \„ R4 
for further security, store a redundant copy in the X86 EShEDI register pair) J Jb4 
store the a number of the allocated save slot in the X86 EAX register (and, again for 1 

further security, store a redundant copy in the X86 EDX register) J 365 



goto EM86_Deliver_lnterrupt( interrupt-byte ) 
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typedef struct { 

save_slot_t * newer, // pointer to next-most-recently-aliocated save slot"! 

save_slot_t* older; //pointer to next-older save slot j-379c 

unsigned int64 epc; // saved exception PC/IP a 

unsigned int64 pew; // saved exception PCW (program control word) I 

unsigned int64 registers[63]; // save the 63 writeable general registers p" b 

// other words of Tapestry context J 

timestampj timestamp; // timestamp to detect buffer overrun > 

int save_slot_ID; // ID number of the save slot -\ 358 

boolean save_slot_is_full; // full / empty flag 357 
} save_slot_t; v 359 ■> 

save_slot_t * save_slot_head; // pointer to the head of the queue -\ 

save slot t * save slot tail; // pointer to the tail of the queue ^ ^3798 

" " ~ v 379b 
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EPC<1:0>==00: 
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AP — SP 
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HANDLER: RISCTOx86 
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REUSE EVENT CODE 
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SIMPLE x86 INSTRUCTION COMPLETION (REUSE EVENT CODE) 
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REUSE EVENTCODE 
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PROBE EXCEPTION FAILED 
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FLUSH EVENT 
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SEQUENTIAL; EXECUTION ENVIRONMENT CHANGED • FORCE EVENT 


NO 
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NO 
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FAR RET 
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NO 


- 
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IRET 
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FARCALL 
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FARCALL 
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FARJMP 
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YES 
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SPECIAL; EMULATOR EXECUTION, SUPPLY EXTRA INSTRUCTION DATA 0 
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ABORT PROFILE COLLECTION 
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NO 


NO 


NO 
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0.1100 


x86 SYNCHRONOUS/ASYNCHRONOUS INTERRUPT W/PROBE (GRP 0) 


NO 
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EMULATOR PROBE 




0.1101 


x86 SYNCHRONOUS/ASYNCHRONOUS INTERRUPT (GRP 0) 


NO 
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x86 SYNCHRONOUS/ASYNCHRONOUS INTERRUPT W/PROBE (GRP 1) 


NO 
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EMUIAIORPROBE 
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x86 SYNCHRONOUS/ASYNCHRONOUS INTERRUPT (GRP 1) 


NO 
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NO 
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1 0000 


IP-RELATIVE JNZ FORWARD (OPCODE: 75, OF 85) 
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NO 
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IP-REIATIVE CONDITIONAL JUMP FORWARD • (JCC, JCXZ, LOOP) 

|| J \LU ll J I W WI lvl 1 IVI V. w Willi 1 VI U I* H Ur l w w | » ^| fc» » • J 


NO 
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IP-RELATIVE CONDITIONAL JUMP BACKWARD - (JCC, JCXZ, LOOP) 


NO 
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CONDJUMP 
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IP-REIME NEAR JMP FORWARD (OPCODE: E9. EB) 

It 1 (LUll 1 1 L>| 1 1U U 1 Villi 1 WI \tU V 11/ ^Vl WWMWi tV| bWj 


NO 
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YES 
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1.1100 


LOAD FROM I/O MEMORY (TLBASI 1=0) (NOT USED IN T1) 


NO 


YES 
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AVAILABLE FOR EXPANSION 


NO 


NO 


NO 
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1.1110 


DEFAULT CONVERTER EVENT; SEQUENTIAL 406 


NO 


NO 


NO 


NO 






1.1111 


NEW PAGE (INSTRUCTION ENDS ON LAST BYTE OF A PAGE FRAME OR 
STRADDLES ACROSS A PAGE FRAME BOUNDARY) 408 


NO 


YES 
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